Apple iOS Authorization Issue Vulnerability

Versions of Apple’s iOS prior to version 27, Apple iPadOS prior to version 27, and Apple macOS Golden Gate prior to version 27 have authorization-related vulnerabilities. These vulnerabilities may allow applications to access sensitive user data...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Security component. They may allow attackers with low privileges to log in and execute infrastructure tasks. Unauthorized updates, insertions, or deletions...

Oracle Solaris security vulnerabilities

Oracle Solaris 11.4 has security vulnerabilities, which stem from issues with the Plugins component. These vulnerabilities could allow high-privilege attackers to log in and execute actions on the infrastructure, requiring user interaction. This could result in unauthorized creation, deletion, or...

Oracle HRMS (UK) security vulnerabilities

The Oracle HRMS UK versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access data through the HTTP network via user interaction. This can result in unauthorized updates,...

Oracle JD Edwards EnterpriseOne Human Resources Management security vulnerabilities

Oracle JD Edwards EnterpriseOne Human Resources Management version 9.2 has a security vulnerability. This vulnerability stems from issues with the Human Resources component. It may allow low-privilege attackers to access through the JDENET network, enabling them to update, insert, or delete certa...

Oracle Data Integrator authorization issue vulnerability

Oracle Data Integrator versions 12.2.1.4.0 and 14.1.2.0.0 have an authorization issue vulnerability. This vulnerability stems from issues with the Console/Repository Explorer component, which may allow unauthenticated attackers to take control of Oracle Data Integrator through HTTP network access...

Oracle One-to-One Fulfillment security vulnerabilities

Oracle One-to-One Fulfillment versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Admin Console UI components. Unauthorized attackers may gain access through HTTP network interactions that require user interaction. This allows unauthorized...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues within the Integration Broker component, potentially allowing unauthenticated attackers to gain HTTP access. Under user interaction, they may unauthorizedly...

Oracle Siebel CRM Integration security vulnerabilities

The Oracle Siebel CRM Integration versions from 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from EAI component issues. Unauthorized attackers may gain access through the HTTP network. Key data or all accessible data may be accessed without user interaction. Additionally...

Oracle Java SE security vulnerabilities

Oracle Java SE 8u503-perf version, 11.0.32.1 version, 17.0.20.1 version, 21.0.12.1 version, and 25.0.4.1 version and 27 version; Oracle GraalVM for JDK 17.0.20.1 version and 21.0.12.1 version; as well as Oracle GraalVM Enterprise Edition 21.3.19.1.1 version have security vulnerabilities. These...

Oracle HTTP Server security vulnerabilities

Oracle HTTP Server versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the OSSL Module component. Vulnerable attackers with low privileges may exploit these vulnerabilities to access and damage the Oracle HTTP Server via the HTTP network...

Oracle Siebel CRM Integration permission and access control issue vulnerability

Versions 25.12 through 26.9 of Oracle Siebel CRM Integration contain a vulnerability related to permission and access control issues. This vulnerability stems from an Open Integration component flaw, potentially allowing unauthenticated attackers to gain network access via HTTP. Under user...

Oracle Siebel CRM Deployment security vulnerability

A security vulnerability exists in Oracle Siebel CRM versions 17.0 through 26.9. This vulnerability stems from issues within the Server Infrastructure component, potentially allowing low-privilege attackers to gain HTTP access and unauthorized access to critical data or all accessible data...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Enterprise Infrastructure SEC component and may allow low-privilege attackers to access the JDENET network, resulting in service hangs or...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Business Logic Infra SEC component, potentially allowing low-privilege attackers to log in and modify the infrastructure. It may also enable...

Oracle Java SE security vulnerabilities

Oracle Java SE 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27 versions; Oracle GraalVM for JDK 17.0.20.1 and 21.0.12.1 versions; as well as Oracle GraalVM Enterprise Edition 21.3.19.1.1 contain security vulnerabilities. These vulnerabilities are due to issues with the JAXP...

Oracle REST Data Services security vulnerabilities

Oracle REST Data Services versions 24.2.0 to 26.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the Core component, which may allow high-privilege attackers to access through the HTTP network, enabling them to unauthorizedly create, delete, or modify critical data o...

Oracle Essbase security vulnerabilities

The Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Security component, which may allow unauthorized attackers to access through the HTTP network and read certain accessible data of the Oracle Essbase without proper authorization...

Oracle MySQL Server security vulnerabilities

Security vulnerabilities exist in Oracle MySQL Server versions 8.4.0 through 8.4.12, 9.7.0 through 9.7.3, and 26.7.0 through 26.7.1, as well as in Oracle MySQL Cluster versions 8.0.0 through 8.0.49, 8.4.0 through 8.4.12, 9.7.0 through 9.7.3, and 26.7.0 through 26.7.1. These vulnerabilities stem...

Oracle Helidon security vulnerabilities

A security vulnerability exists in Oracle Helidon versions 3.0.0 through 3.2.21. This vulnerability stems from issues within the helidon-cors component and may allow unauthenticated attackers to access HTTP-based networks. It could enable unauthorized updates, insertions, or deletions of certain...